This Privacy Notice describes how Expandopedia Inc (“Expandopedia”, “we”, “our” or “us”) process your Personal Data and how your privacy is safeguarded in the course of our relationship with you.
This notice is applicable to you as a data subject if and to extend mandatory under applicable law.
1. Name and Address of the Controller
The name and address of the Controller are: Expandopedia Inc. , address: 524 S. Dearborn, Floor 12 Chicago, IL 60605
2. Contact details of the Compliance Manager
Carrer de Pujades, 350, 4th floor, 08019 Barcelona (Spain)
+34 93 122 37 60/ ext. 137
3. Purposes and Legal Basis of the Processing
We process your Personal Data for the purpose of carrying out the following activities, including but not limited to:
A. Website usage
We collect and process this information to execute a contract with you, or you have given us your explicit consent to process your Personal Data for specified purposes, including but not limited to the provision of our services, and other items requested by you. We will seek your explicit consent to keep your Personal Data in our files to update you with our latest news, literature, business related insights, and/or upcoming events (e.g. for direct marketing). Additionally, your Personal Data may be processed in accordance with the legitimate interests pursued by Expandopedia to market or promote our products and services, to communicate with you adequately, to analyze, develop, improve or optimize our website, and to maintain security of our sites, networks and systems. We may also process your Personal Data to comply with applicable laws and regulations.
B. Automatically Collected Information and Cookies
C. Third party websites and links
D. Marketing choices
We will use your Personal Data to provide you with (i) information about products and services which we think may be of interest to you; (ii) providing you with newsletters, articles, updates and announcements of upcoming events; (iii) improving and tailoring our communications; (iv) analyzing out marketing efforts. We will only send you such materials by email and/or contact you by telephone if, when you are presented with the option during our contact with you, you gave us your prior express consent to receive such communications. You have the right to opt out of receiving direct marketing and targeted online advertising. Where we send marketing emails, we provide unsubscribe options for your use within our emails.
E. Register for Webinars
When you register for a webinar hosted by us, we will record your Personal Data based on our legitimate interest to provide you with the event details and to further contact you for future events. We may record our events, and all presenters will have their image and audio captured in the recording. If you are an attendee, you may have the option of sharing your image and audio during the session. If you choose to do so, this will also be captured in the recording. Some events will feature a moderated Q&A. If you choose to interact with the Q&A, your comments may be published to others at the event and will also form part of the recording. For some events, we may publish the recording on our website and/or YouTube channel so this will be accessible to a wider audience and by participating you consent to having your Personal Data provided on those channels.
F. Personal Data obtained from third parties
We receive Personal Data about you if you have accessed any material sponsored by us on any other HR website, including but not limited to, the Society for Human Resource Management (SHRM). The information we obtain is your name, company name, job function, country, work email, and work phone number. Before downloading the material sponsored by us, you have consented to have your Personal Data shared with the sponsor and to be contacted, which serves as our legal basis for processing this Personal Data.
Please see Section D: Marketing Choices for further details on the purpose of processing and your rights.
4. Categories of Recipients
Your data can be processed by the following categories of recipients: service providers who help manage our business and deliver services, which includes, but is not limited to technology vendors, IT administrators, consultants, subcontractors and other service providers who need access to such information to carry out work on our behalf or to assist us in the upholding of our website and other business-related functions such as website analytics and/or affiliates of Expandopedia.
We may share your data with regulators in the applicable jurisdictions, to comply with all applicable laws, regulations and rules, and requests of law enforcement bodies and other governmental agencies. We may share in aggregate, statistical form, non-personal information regarding the visitors to our website, traffic patterns, and website usage with our partners, affiliates or advertisers
If a recipient of your data is located in a third country for which the European Commission has not issued an adequacy decision, the transfer is made on the basis of the standard data protection clauses adopted by the European Commission. You can obtain a copy of those clauses from our Compliance Manager. The EU standard contractual clauses are also available under the following link: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en
5. Retention Period
We retain your Personal Data only so long as it is required for purposes for which it was collected. This will usually be the length of any applicable statutory limitation period.
6. Security of information
Taking into account the nature, scope, context, and purposes of processing Personal Data, as well as the risks to individuals of varying likelihood and severity, we have implemented technical and organizational measures designed to protect the security of your Personal Data.
7. Your Rights
According to the provisions of Art. 15-21 GDPR, under certain circumstances, the existence of which we will examine on a case to case basis, you have:
A. the right to demand information from us about the Personal Data stored about you;
B. the right to request correction, deletion or restriction of the processing of Personal Data stored about you;
C. the right to revoke your consent at any time with effect for the future. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until such revocation. Despite your consent, we reserve the right to process your data based on statutory permissions;
D. with regard to the processing of your Personal Data on the basis of our legitimate interests, the right to object at any time to the processing of your Personal Data for reasons arising from your personal situation (Art. 21 GDPR);
E. the right to lodge a complaint with the supervisory authority if you are of the opinion that the processing of your Personal Data violates applicable data protection law.
California Residents under California Consumer Privacy Act (CCPA)
This section provides additional details about the Personal Data we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA.”
For more details about the Personal Data we have collected over the last twelve (12) months, including the categories of sources and the purpose of processing, please see Section 3 above. We share this information with the categories of third parties described in Section 4. above. Expandopedia does not sell (as such term is defined in the CCPA) the Personal Data we collect (and will not sell it without providing a right to opt out). Please note that we do use third-party cookies for our advertising purposes as described above.
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of Personal Data we collect (including how we use and disclose this information), to delete their Personal Data, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
California consumers may make a request pursuant to their rights under the CCPA by contacting the Compliance Manager at firstname.lastname@example.org. To learn more about your California privacy rights, please visit https://oag.ca.gov/privacy/privacy-laws.